Skip to content
CyberBadger
Free guide · Document forensics

10 red flags of a fake rental application.

A forged application rarely looks wrong. It gives itself away in the data underneath the documents and the way the pieces fit together. Here is what our forensic examiners look for, so you can spot the same tells before you hand over the keys.

Get an application checked

This is a document-forensics guide, not legal advice. These are indicators, not proof, and a clean document is never a guarantee.

What to look for

The tells a forensic examiner checks first.

No single one is a smoking gun. It is the pattern, several of these landing together, that turns a hunch into something worth acting on.

1

The deposit comes from a different name

Money that arrives under a name that isn't the applicant's, or from an unrelated third party, is one of the clearest tells. Ask why, and get the answer in writing, before anything moves.

2

The employer only exists on the documents

A company you can find on the pay stub and letter but almost nowhere else, with a website registered weeks ago and no real footprint, is a classic fabricated reference. Search the business name, address and business number on your own.

3

The verification contact loops back to the applicant

Call the employer's HR line or email the address on the letter before you trust it. If the number or inbox traces back to the applicant's own line, the reference is self-made.

4

The income math doesn't reconcile

On a real Canadian pay stub, CPP, EI and income tax track predictable rates against the gross. Deductions that don't add up, or a net that lands suspiciously round, point to a stub built by hand.

5

Details drift across the applicant's own files

An employee number, address, start date or pay period that changes between two stubs from the same job, or between the stub and the letter, means the set was assembled rather than issued.

6

The file was exported from the wrong place

A bank statement or credit report saved from a phone, a design tool, or a generic PDF writer, instead of downloaded from the bank or bureau, is a strong editing signal. The document's own metadata often gives it away.

7

Everything agrees with itself, nothing with the outside world

Fabricated sets are internally perfect because one person made them. Real documents can be checked against an external source: the employer, the bank, the CRA. If nothing can be independently confirmed, treat the whole file as unproven.

8

The dates don't fit a real workflow

Creation and modification times minutes apart, or documents all 'issued' the night before they were sent, don't match how payroll systems and banks actually generate paperwork.

9

One template is doing a lot of work

When the pay stub, the letter and the statement share a layout, a font quirk, or hidden identifiers, several 'independent' documents likely came from a single source.

10

Urgency, plus a reason to control the address

Pressure to skip screening, pay outside normal channels, or move in immediately, especially paired with a motive to use the unit as a mailing address, is a behavioural flag worth pairing with the document ones.

If you see them

What to do with a red flag.

Don't accuse

These are signals, not proof. A single flag can have an innocent explanation, so treat them as reasons to look closer, never as a verdict on a person.

Verify independently

Confirm the employer on a number you found yourself, not the one printed on the letter. Check the business name and address against public records.

Check before money or keys move

With the applicant's consent, review the documents properly while you still have leverage, not after the deposit clears or the lease is signed.

Escalate when the stakes are high

For an expensive lease, a mid-move-in scare, or anything that could be disputed, get a documented forensic assessment you can stand behind.

The same tells show up well beyond rentals.

Fabricated income, altered banking details and template documents turn up in supplier invoices, loan and mortgage applications, hiring and credential checks, and insurance claims. If a document matters and something feels off, the forensic approach is the same.

Look for yourself, free

BadgerForensics reads a single document's metadata and structure right in your browser, with nothing uploaded. It is a fast first look at the file's own timeline and origin.

Open BadgerForensics

Have a person examine the whole set

When the stakes are a lease, our trained examiners review the full application, the income math, the employer, the edit signals and the cross-document consistency, and return a graded findings report you can act on. From $100.

Document forensics

Not sure about an application in front of you?

Send us the set and our examiners will tell you how well it holds up. Findings from $100, with a full forensic report when the stakes are higher.

Call